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(54) Method and apparatus for upgrading software subsystems on a network system 

(57) A method and system for updating a software 
subsystem while services are being provided by the 
software subsystem is provided. Initially, instructions 
are processed from a primary software subsystem load- 
ed at a first base address associated with a primary stor- 
age unit. A secondary software subsystem is download- 
ed at a second base address associated with a second- 
ary storage unit while the primary software subsystem 
is being executed. The secondary software subsystem 
typically contains an updated version of the primary soft- 
ware subsystem. To install the updated software sub- 
system, the first base address associated with the pri- 
mary storage unit is swapped with the second base ad- 
dress associated with the secondary storage unit. Exe- 
cution continues using the updated software subsystem 

without a significant interruption in service. iis^<^lt^dv!rtth^o^^^^ 
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D s ription 

BACKGROUND OF THE INVENTION 
Fi Id of the Inventi n 

[0001 ] This invention generally relates to network sys- 
tems and more particularly, to a method and apparatus 
tor upgrading software subsystem stored on a network 
system. 

Description of the Related Art 

[0002] A private branch exchange (PBX) is a tele- 
phone switch used to provide telephone service for calls 
made within a private group or company Typically, the 
PBX uses privately leased lines or internal wire or wire- 
less infrastructure to carry calls between a central 
switching device and the various users. The PBX saves 
usage charges on calls made entirely within the compa- 
ny by avoiding public telephone networks. Having a PBX 
also offers a multitude of features and services which 
can add significant business value to an organization. 
[0003] Features offered on PBX systems have grown 
significantly as these telephone switches have become 
more integrated with computers. To handle incoming 
calls, automatic call distribution (ACQ) map an incoming 
call to the correct party or parties of an organization. The 
ACQ uses complex algorithms based on utilization, user 
activity, business rules, and other factors to route the 
incoming call correctly. Services based on caller line 
identification (CLIO) enable a telephone switch to Iden- 
tify the telephone number of an incoming call, look up 
corresponding information in a database, and route the 
call accordingly. For example, the area code of an in- 
coming call can be used to direct an incoming purchase 
request to the correct sales representative for that re- 
gion or area. PBX systems are also developing voice 
processing and voice recognition systems to replace a 
human agent accessing information through a computer 
terminal tor a particular customer. 
[0004] Many companies have developed large call 
centers which utilize these PBX systems to deliver cus- 
tomer service and information. In competitive markets, 
many companies are able to differentiate their products 
and the services they provide utilizing sophisticated 
PBX systems. Often, they must operate 24 hours a day 
and seven days a week. 

[0005] A conventional PBX system, such as the Merd- 
ian Evolution by Nortel. Inc., includes a central call proc- 
essor (CP) shelf, a node controller (NC) unit, an access 
controller (AC) unit and numerous peripheral equipment 
(PE) devices coupled to handsets, fax modules, or voice 
processing modules. The CP shelf provides centralized 
switching capabilities between trunks of users attached 
to the system through multiple NC devices. The NC units 
act as large switching devices in- directing calls and 
communicating with the AC units. The CP controls soft- 



ware upgrades by downloading loadware into specific 
target packs such as the NC unit, the AC units and 
sometimes even th PE devices. How ver, it is becom- 
ing increasing difficult to upgrade these various control- 
5 ler units without interrupting service or risking ext nsive 
downtime. 

[0006] On conventional systems, upgrades involve 
downloading the loadware into specific target packs and 
reprogramming the target pack with new functionality 

10 provided in the new loadware. The NC and PE devices 
are two types of devices referred to as target packs and 
downloading a loadware module is considered upgrad- 
ing a pack. Conventional systems upgrade packs using 
a "cold download" technique which leaves the pack in a 

15 disabled state during the upgrade process. The cold 
download can leave an NC inoperable and also cause 
calls to be dropped which may be in progress. A new 
load module can also make the system remain down it 
the downloaded portion of software is incompatible with 

20 the data structures, the communications protocols, or 
any other portions of the switch. It packs on a PBX were 
upgraded using a "hot download", the PBX system could 
be upgraded without significantly interrupting service tor 
existing or new calls. 

25 [0007] An upgrade installed incorrectly can be very 
difficult to uninstall on a conventional PBX. Many as- 
pects of the installation on a conventional PElX cannot 
be backed out without significant human intervention. If 
software is incorrectly burnt in flash, the flash-based 

30 hardware device may be inoperable and need replacing. 
Alternatively, software may need to be upgraded man- 
ually and not automatically by the system. Either alter- 
native leaves the PBX system down tor an extended pe- 
riod of time which can interrupt service and prevent calls 

35 from being made. 

[0008] In light of discussion above, it is desirable to 
develop an improved system for delivering software up- 
grades to a private branch exchange (PBX) in switching 
telephone system. 

40 

SUMMARY OF THE INVENTION 

[0009] Consistent with the present invention, as em- 
bodied and broadly described herein, a method and sys- 

45 tem tor updating and loading a software subsystem 
used by a network system device is provided. The meth- 
od can be adapted to work with multiple software sub- 
systems stored in corresponding banks of a multiple 
bank storage unit. The system and method can also 

so work with a storage unit having only two different stor- 
age banks. 

[0010] During the initial update process, instructions 
are processed from a primary software subsystem load- 
ed at a first base address associated with a primary stor- 
es age unit coupled to the network system. A secondary 
software subsystem is downloaded at a second base 
address associat d with a secondary storage unit cou- 
pled to the network system while the primary software 
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subsystem is being executed. The secondary software 
subsystem typically is an updated version of the primary 
software subsystem. To activate the updated software 
subsystem, the first base address associated with the 
primary storage unit is swapped with the second base 
address associated with the secondary storage unit. Ex- 
ecution continues using the updated software subsys- 
tem. 

[0011] tn another aspect of the present invention, a 
method and system is provided for loading a software 
subsystem on a network system which has a primary 
and secondary software subsystem. Initially, the system 
is booted having a primary software subsystem loaded 
at the first base address associated with a primary stor- 
age unit coupled to the network system. The system al- 
so has a secondary software subsystem loaded at a 
second base address associated with a secondary stor- 
age unit coupled to the network system. Typically, the 
primary and secondary storage units are different banks 
of a flash bank memory device. A method is used to se- 
lect a software subsystem from the primary software 
subsystem and the secondary software subsystem 
which is not corrupt and contains the latest version of 
the software. If the secondary software subsystem is se- 
lected then the first base address associated with the 
primary storage unit is swapped with the second base 
address associated with the secondary storage unit. 
Otherwise, the primary software subsystem is-selected 
and executed. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0012] The accompanying drawings, which are incor- 
porated in and constitute a part of this specification, il- 
lustrate an embodiment of the invention and, together 
with the description, serve to explain the advantages, 
and principles of the invention. 
[001 3] In the drawings: 

FIG. 1 illustrates a network suitable for use with 
methods and systems consistent with the present 
invention; 

FIG. 2 illustrates a hierarchical telecommunication 

switch suitable for use with methods and systems 

consistent with the present invention; 

FIG. 3 is a block diagram of a call processor (CP) 

and an node controller (NC) suitable for use with 

methods and systems consistent with the present 

invention; 

FIG. 4 is a block diagram of a dual-bank storage 
unit suitable for use with methods and systems con- 
sistent with the present invention; 
FIG. 5 is a flow chart indicating the steps for updat- 
ing a software subsystem for use with methods and 
systems consistent with the present invention; 
FIG. 6 is a flow chart indicating the steps for loading 
a software subsystem suitable for use with methods 
and systems consistent with the present invention; 



FIG . 7 is a flow chart indicating steps consistent with 
the present invention for picking which software 
subsystem should be selected from a dual-bank 
storage unit; and 
5 FIG. 8 is a flow chart indicating the steps for per- 

forming a bank switch in accordance with methods 
and systems consistent with the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

10 

INTRODUCTION 

[0014] Reference will now be made in detail to an im- 
plementation of the present invention as illustrated in 
IS the accompanying drawings. Wherever possible, th 
same reference numbers will be used throughout the 
drawings and the following description to refer to the 
same or like parts. 

[0015] Systems consistent with the present invention 

20 address shortcomings of the prior art and provide a 
unique system and apparatus for updating a software 
subsystem on a network system (NS) device. NS devic- 
es can be found in almost any processor based system 
where processing is distributed between a master and 

25 slave or a client and server pairing. For example, FIG. 
1 illustrates an exemplary network using NS devices, 
the clients, and NS servers suitable for use with meth- 
ods and systems consistent with the present invention. 
Computer network 100 in FIG. 1 includes a local area 

30 network 101 , a wide area network (WAN) 109, and an- 
other local area network (LAN) 120. Local area network 
101 includes NS devices 102. 104 and 1 06 and NS serv- 
ers 108 and 110. Local area network 120 includes NS 
servers 112, 114, 116, and 118. This exemplary config- 

35 uration of NS devices and NS servers covers a class of 
client-server systems suitable for use with one or more 
embodiments of the present invention. Accordingly, 
these embodiments of the present invention are not lim- 
ited just with telephone switching systems discussed 

40 below. Instead, the methods and systems described 
herein can be applied to a broad range of client-server 
systems such as illustrated in FIG. 1. 
[0016] As applied to a telephone switching system, a 
control processor (CP) unit acts as a master unit, or NS 

45 server, while a node controller (NC) unit and access con- 
troller (AC) unit act as slave units, or NS devices, which 
take instructions from the CP unit. Each slave unit in- 
cludes a unique multiple-bank storage unit implemented 
with field programmable read only memory (FPROM) 

50 that is commonly referred to as flash memory. 

[0017] In method and systems consistent with the 
present invention, at least two different software sub- 
systems are loaded into a multiple bank flash memory^. 
At a minimum, the software subsystems include a pri- 

55 mary software subsystem and a secondary software 
subsystem. Additional software subsystems and banks 
of storage can be used by increasing the number of soft- 
ware subsystems and corresponding number of banks 
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in a flash memory device. 

[0018] Each software subsyst m is capable of per- 
forming similar s rvices for the NC unit or CP unit rang- 
ing from high-level applications to low r level operating 
system functions. On a storage device having only two 
storage banks, a primary software subsystem loaded in- 
to a primary storage unit is active executing instructions 
while the secondary software subsystem loaded into a 
secondary storage unitofthe dual-bank flash memory is 
idle. Typically, the secondary software subsystem con- 
tains an older version of the primary software subsystem 
before it is updated. The logical separation between the 
primary and secondary storage units in the flash mem- 
ory enables an updated software systems to be down- 
loaded into the flash memory device from the master 
unit while the slave unit continues processing instruc- 
tions. 

[0019] An eloquent technique is used to swap the ac- 
tive software subsystem in the primary bank with the up- 
dated and idle software subsystem in the secondary 
bank. This technique carefully selects a software sub- 
system which is updated and not corrupted. According- 
ly, if the updated software subsystem is corrupt then the 
technique selects the "backdoor" option and the original 
active software subsystem is executed instead. The 
backdoor is used to revert to the system configuration 
before changes or modifications were made. 
[0020] Processing overhead associated with relocat- 
ing the updated software subsystem in the flash memory 
address space is bypassed by swapping base register 
values of each bank in flash memory. This eliminates 
the bookkeeping associated with conventional systems 
that must map addressing on an updated module relo- 
cated to another area in flash memory. Instead, systems 
and methods consistent with the present invention in- 
stalls updated software subsystems accurately. 
[0021] Relocating the updated software subsystem 
facilitates a "hot download" of the software subsystem 
rather than the "cold downloads" found in conventional 
systems. That is. software updates can be applied to 
systems while they are operating (a "hot download") in- 
stead of requiring the system to be disabled (a "cold 
download") for the updates. On a telephone switch, this 
enables existing calls to continue without being 
dropped. Moreover, only a brief moment may exist 
where new calls can not be made on the telephone 
switch. This is extremely advantageous in high availa- 
bility telephone switching systems and computer devic- 
es which must exhibit a minimum amount of downtime 
even when the various software subsystems are updat- 
ed. 

Telecommunication Switching Network 

[0022] FIG. 2 illustrates a hierarchical telecommuni- 
cation switch suitable for use with methods and systems 
consistent with the present invention. Accordingly, hier- 
archical tel communication switch 200 also known as 



switch 200 includes a call processor (CP) shelf 202, a 
node controller (NC) 204 and NC 214, and a series of 
peripheral equipment (PE) shelves 206B, 208B, 21 OB, 
and 21 2B, coupled to corresponding access controller 

s (AC) units 206A, 208A. 21 OA. and 21 2A. These AC units 
206A, 208A, 210A, and 21 2A are coupled to a large 
number of handset devices 216 used for transmitting 
and manipulating voice and data information. 
[0023] At the top of the switch hierarchy, system man- 

10 agement is delegated to numerous hardware cards and 
software subsystems (not shown) located in CP sh If 
202. Hardware and software in CP shelf 202 act as the 
master processing device in switch 200. In a typical sce- 
nario, hardware and software subsystems downstream 

IS from CP shelf 202 such as NC 204 and AC unit 206A 
communicate status on existing calls and pending calls 
to hardware in CP shelf 202 using objects and other con- 
structs available in an object oriented language. Deci- 
sions are made by hardware and software In CP shelf 

20 202 and transmitted back to the requesting downstream 
subsystem to carry out. 

[0024] NC 204 acts essentially as a concentrator and 
switching device for calls transmitted between CP shelf 
202 and handset units 216. The protocol used between 

25 NC 204 and CP shelf202 is preferably TCP/IP or any 
other widely used networking protocol carried over a 
high speed communication link such as asynchronous 
transfer mode (ATM) or Ethernet. NC 204 is coupled to 
CP shelf 202 and multiple ACs 206A, 208A, 21 OA. and 

30 21 2A. More importantly NC 204 includes a multiple- 
bank flash memory (not shown) suitable for receiving 
software subsystem upgrades consistent with methods 
and systems of the present invention. The techniques 
used to apply software subsystem upgrades in NC 204 

35 can also be applied to updating software subsystems in 
AC units 206A. 208A, 21 OA, and 21 2A. 
[0025] AC units 206A, 208A,.21 OA, and 21 2A provide 
access to the various PE shelves 206B, 208B, 21 OB, 
and 21 2B. Messages and data are transmitted to differ- 

40 ent cards on each PE shelf depending on the cards spe- 
cific functions. The cards on PE shelves 206B, 208B, 
21 OB, and 21 28 include functions such as call forward- 
ing, conference call, and dialtone service. Like NC units 
204 and 21 4. AC units 206A,208A, 21 OA. and212Aalso 

45 includes a dual-bank flash memory (not shown) suitabi 
for receiving software subsystem upgrades consistent 
with methods and systems of the present invention. 
[0026] FIG. 3 is a block diagram of a call processor 
(CP) unit and a node controller (NC) unit 204 suitable 

50 for use with methods and systems consistent with the 
present invention, CP unit 202 includes a call processor 
302, an input/output unit 304, a flash memory 306. a 
hard disk 308 having loadware files 309, and a commu- 
nication controller 310. Call processor 302 is used to 

55 perform centralized system-level logic associated with 
switch 200. Specifically, methods and systems of the 
present invention use call processor 302 to process in- 
structions associated with upgrading the softwar sub- 
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systems used in NC unit 204 and AC unit 206A. 
[0027] A peripheral system download module (PSDL) 
314 contained within flash memory 306 controls the 
erasing and burning of flash memory on the target packs 
such as NC unit 204. An operating system (OS) 312 is 
also contained within flash memory 306 and is used to 
manage local resources on CP unit 202. Generally, 
PSDL module 314 controls and coordinates software 
subsystem upgrades used in devices such as NC unit 
204 and AC unit 206A. Details on the methods used in 
PSDL module 31 4 are discussed in further detail below, 
[0028] Hard disk 308 on CP unit 202 includes load- 
ware files 309 containing software subsystem updates 
used in switch 200. The specific contents of each toad- 
ware file 309 varies and depends on the software com- 
ponents used in a particular hardware component in 
switch 200. For example, one group of loadware files 
309 may include software subsystem updates to fea- 
tures on NC unit 204 while another type of loadware file 
309 Includes software subsystem updates specific to 
features on AC unit 206A. Features on AC unit 206A 
can includes support for features such as conference 
and dial tone service, internal clocks for synchroniza- 
tion, and call forwarding. In general, systems and meth- 
ods consistent with the present invention are used to 
update a variety of software subsystems and are not lim- 
ited to only updating software subsystems that may be 
found on NC unit 204 or AC unit 206 A. 
[0029] Communication controller 31 0 facilitates com- 
munication of data and control signals between CP unit 
202, NC unit 204, and AC unit 206A. Typically, commu- 
nication controller 310 is an asynchronous transfer 
mode (ATM) based device capable of carrying IP or 
TCP/IP traffic. Attemative controller devices can also be 
implemented using ethernet technology In combination 
with TCP/IP or UDP/IP protocols. Using a common com- 
munication protocol, such as TCP/IP, cuts on develop- 
ment costs and provides a common networking platform 
to integrate different devices into switch 200. 
[0030] NC unit 204 includes a NC processor 307, an 
access controller (AC) interface 305, a flash memory de- 
vice 311, a DRAM memory device 313, and a commu- 
nication controller 315 compatible with similar subsys- 
tems on CP unit 202. NC processor 307 processes In- 
coming and outgoing calls and functions as a switching 
device for calls placed at different layers in switch 200. 
AC interface 305 provides a communication link be- 
tween NC unit 204 and peripheral devices downstream 
from NC unit 204. As mentioned above, communication 
controller 31 5 uses a standard communication protocol, 
such as TCP/IP, to transfer data and control information 
between CP unit 202 and NC unit 204 while switch 200 
downloads loadware file 309 or processes calls. 
[0031] Flash memory 311 is preferably implemented 
with multiple-banks of flash memory. Separating flash 
memory 31 1 into multiple banks enables one to execute 
code located in one bank while writing or "burning", in- 
formation in a second bank in flash memory 311 This is 



important if software subsystem updates are to be hot 
downloaded while the switch 200 continues to process 
and place calls. In alternative embodiments, flash mem- 
ory 311 , can be replaced with other types of compute r- 

5 readable media, such as secondary storage devices, 
like hard disks, floppy disks, CD-ROM, or other forms of 
RAM or ROM. Data transmission mediums, such as a 
carrier wave on the Internet, is another type of compu- 
ter-readable media which can also serve the function 

10 provided by flash memory 31 1 . 1 n contrast to flash mem- 
ory 31 1 , DRAM memory 31 3 is used to temporarily store 
data and control information while the NC unit 204 is up 
and processing calls on switch 200. 
[0032] FIG. 4 Is a block diagram of a multiple-bank 

IS storage unit suitable for use with methods and systems 
consistent with the present invention. Each NC unit 204, 
AC unit 206A, or other NS device designed in accord- 
ance with the present invention include a multiple-bank 
storage device. Specifically, multiple-bank flash memo- 

20 ry 311 includes at least flash bank A 402 and flash bank 
B 404 each loaded with a downloadable image 41 4 and 
a non-downloadable image 416. Downloadable image 
414-contains the software subsystems which can be 
downloaded and updated while switch 200 is operating. 

25 Non-downloadable Image 416 is installed at the factory 
and preferably is not upgraded at the customer site or 
in the field. 

[0033] On flash bank A 402, downloadable image 414 
Includes an operating system 408 and applications 406. 

30 Operating system 408 also includes peripheral system 
download (PSDL) module which controls the actual 
erasing and burning of target packs In flash memory. 
Similarly, flash bank B 404 has a downloadable imag 
414 including operating system 412 with PSDL modul 

35 (not shown) and applications 410. Corresponding non- 
downloadable images 416 on flash bank A 402 include 
a boot code image 409 which includes a loadpicker logic 
41 1 for selecting a valid software subsystem. Flash bank 
B 404 also includes non-downloadable images 416 in- 

40 eluding a boot code image 41 3 having a loadpicker logic 
415. 

[0034] Loadpicker logic 411 and 415 selects a valid 
software subsystem from flash bank A 402 or flash bank 
B 404 accordingly. Downloadable image 414 is used to 
45 perform essential operations such as performing fil 
transfers using a file transfer protocol like ftp or tftp, and 
broadcasting network information over a network con- 
nection using a network protocol such as UDP/IP 
[0035] Utilizing dual-banks enables one software sub- 
so system to be executed in the active bank while updated 
software subsystems are downloaded into the /d/ebank. 
In FIG. 4, Base address A 41 8 corresponds to the active 
bank while Base address B 420 corresponds to the idle 
bank. This arrangement supports the "hot download" 
55 feature which enables software subsystem updates to 
be applied while NC unit 204 or AC unit 206A are up 
and running. 

[0036] On conventional systems, flash images are 
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statically linked and therefore are non-relocatable into 
a different address space. However, the present inven- 
tion avoids these non-relocatable code Issu s with a 
programnnable chip s lect that swaps base addresses 
of the two flash banks. This obviates the need to cr ate 
and manage separate loadware images for each bank 
and address space. The programmable chip swaps 
base addresses and makes the updated flash bank ac- 
tive. 

[0037] Load picker logic 41 1 in flash bank A 402 rem- 
aps the base address of the two flash banks depending 
on which flash bank contains a valid and updated soft- 
ware subsystem. After a software subsystem is upgrad- 
ed, flash bank A and flash bank B essentially swap base 
address mapping values and thereby become active or 
inactive. This avoids complex code relocation issues be- 
cause a single loadware file 309 can be used in multiple 
banks of flash memory 311 rather than having different 
loadware files 309 compiled and linked for each bank's 
address range. 

[0038] This novel multiple-bank design feature also 
supports a "backdoor" that enables a controller, such as 
NC unit 204, to load a previous software subsystem 
when an attempt to upgrade the software subsystem 
fails. The backdoor is a technique for backing out a failed 
installation or upgrade of a software subsystem on a NS 
device. Consequently, before base addresses are 
swapped, loadpicker logic 411 in flash bank A 402 en- 
sures that the updated software subsystems such as op- 
erating system 412 and applications 410 are properly 
downloaded into flash bank B 404. If the download did 
not occur properly, loadpicker logic 411 will activate the 
bank with non-updated and uncorrupted code. In this 
case, flash bank A. Alternatively, if the download does 
occur properly then the base addresses are swapped 
and the active bank becomes flash bank B rather than 
flash bank A. 

OPERATION OF THE SWITCHING NETWORK 

[0039] FIG. 5 is a flow chart of a method for updating 
a software subsystem suitable for use with the present 
invention. This method can be used to update a software 
subsystem stored on any network system having multi- 
ple memory banks and capable of holding multiple soft- 
ware subsystems. Preferably, services are provided 
from a software subsystem being executed in a primary 
bank of memory while the upgraded software subsys- 
tem is downloaded into a secondary bank of memory on 
the network system. The base addresses are swapped 
once the updated software subsystem is successfully 
downloaded and the execution begins using the upgrad- 
ed software subsystem. 

[0040] On switch 200. various software subsystems 
operate network systems such as NC unit 204 and AC ■ 
unit 206A. Software subsystems on these network sys- 
tems can be updated using methods and systems con- 
sist nt with the present invention. Accordingly, the 



methods and systems applied to NC unit 204 and AC 
unit 206A are provided only as an exarriple. 
[0041] In operation, NC unit 204 processes instruc- 
tions from a primary software subsystem loaded at a first 
5 base address associated with a primary bank of memory, 
such as flash bank A 402 in flash memory 311 . By de- 
fault. NC unit 204 processes instructions using the soft- 
ware subsystem located in flash memory 311 at base 
address A 418. PSDL in active bank A 402 executes a 

^0 method consistent with the present invention download- 
ing a secondary software subsystem, which is an updat- 
ed version of the primary software subsystem, into a 
secondary memory bank such as flash bank B 404 at 
base address B 420 (step 502). In practice, CP shelf 

^5 202 initiates the download process where the target 
pack's contents are erased and burned with the updated 
software subsystem onto flash bank B 404 as a back- 
ground task while the primary software subsystem 
stored in flash bank A 402 in flash-memory is actively 

^0 executing call processing applications in the fore- 
ground. 

[0042] The method determines if the updated soft- 
ware subsystem is downloaded successfully into the 
idle flash bank B404 by checking header values and 

?5 checksum values associated with the updated software 
subsystem (step 504). If the download is not successful, 
processing continues on the primary software subsys- 
tem which in this example is stored in flash bank A 402, 
the active bank. Alternatively, after a successful down- 

'0 load the method updates a version counter associated 
with flash bank B 404 indicating that a new version of 
the software subsystem has been loaded (step 506). 
The version counter is used later by loadpicking logic 
411 when a reboot or reset occurs to determine which 

5 flash bank contains the latest software subsystem. 
[0043] Once version information is updated, the meth- 
od switches the active storage unit, for example flash 
bank A 402, to the idle storage unit, such as flash bank 
B404 (step 508). Preferably, the method switches banks 

0 by swapping base address A 418 associated with flash 
bank A402 with the base address B420 associated with 
the flash bank B404. This causes NC unit 204 to begin 
processing instructions from the updated software sub- 
system loaded at base address B 420 in flash bank B 

> 404 (step 510). This completes the software subsystem 
upgrade process. 

[0044] FIG. 6 is a flow chart of a method for selecting 
the proper software subsystem suitable for use with 
methods and systems consistent with the present inven- 
• tion. These steps are used when a network system, 
such as NC unit 204. having dual-bank flash memory 
311 is booted or reset. The method determines which 
software subsystem stored in dual-bank flash memory 
311 should be executed. The method reviews the integ- 
rity and version of each software subsystem to deter- 
mine which software subsystem should be executed. 
Specifically, this assumes that NC unit 204 has a prima- 
ry software subsystem stored in flash memory 311 at a 
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first base address, such as base address A 418, and a 
secondary software subsystenn stored in flash memory 
31 1 loaded at a second bas address, such as base ad- 
dress B 420. In a preferred embodiment, however, NC 
unit 204, does not explicitly indicate which software sub- 
system should be loaded, 

[0045] Loadpicker logic 411 selects which software 
subsystem should be executed (step 602). The base ad- 
dresses loadpicker logic 411 swaps depends on which 
software subsystem is selected (step 604). If the select- 
ed software subsystem is loaded in flash memory 311 
at base address A 418, then no base address switch is 
required. However, if the selected software subsystem 
in flash memory 311 is at base address B 420, then a 
base address switch is required (step 606). Details on 
swapping base address values is discussed below in 
connection with FIG. 8. Loadpicker logic 411 invokes the 
correct software subsystem once the base address is 
set properly (step 608). 

[0046] FIG. 7 is a flow chart of a method consistent 
with the present invention for selecting which software 
subsystem should be executed at step 602. Initially, 
loadpicker logic 411 determines whether the primary 
software subsystem has been altered or corrupted since 
it was generated (step 702). This typically involves 
checking header information in the primary software 
subsystem and verifying the checksum value for the 
software subsystem. Similarly, loadpicker logic 411 per- 
forms an analysis of the header information and check- 
sum information on the secondary software subsystem 
(step 704). In this example, primary software subsystem 
is stored in flash bank A 402 and secondary subsystem 
is stored in flash bank B 404 of flash memory 311 . 
[0047] The goal of loadpicker logic 411 is to select the 
latest software subsystem version that is properly down- 
loaded and not corrupt or altered. Accordingly, if load- 
picker logic 411 determines that secondary software 
subsystem is altered (step 706) then the primary soft- 
ware subsystem is selected (step 708). However, if the 
primary software subsystem is altered or corrupt then 
the secondary subsystem is selected (step 712). It 
should be noted that it both software subsystems ap- 
pear to be corrupt, loadpicker logic 411 preferably se- 
lects the primary software subsystem (step 708). Under 
these circumstances, it is possible that the primary soft- 
ware subsystem may not execute properly. If both the 
primary and secondary subsystems are unaltered then 
loadpicker logic 411 selects the most recent software 
subsystem version (step 714). A version count associ- 
ated with each flash bank in flash memory 311 is incre- 
mented each time a new version is downloaded from 
CP shelf 202, A higher version count indicates which 
bank in flash memory 311 contains the latest version. 
[0048] FIG. 8 is a flow chart of a method for performing 
a bank switch consistent with the present invention. The 
bank switch command is received at step 508 after up- 
dating software while NC 104 is running or from step 
606 when NC 204 boots or resets (step 802). Th bank 



switch takes advantage ofthe programmable chip select 
feature typically found in many micro controller units 
such as the Motorola QUICC micro controller. This fea- 
ture is used to remap the base addresses of each bank 

5 in flash memory 31 1 . 

[0049] In operation, the bank switch routine using the 
chip selects is copied from flash memory 311 to DRAM 
312 (step 804). The program counter is set to an ad- 
dress in DRAM 312 and the bank switch routine is exe- 

10 cuted. The bank switch routine reads base register val- 
ues CSO and CS1 from each bank in flash memory 311 
(step 808). Base register value CS1 is stored as tempo- 
rary base register value TCS1 and base register value 
CSO is stored in temporary base register value TCSO 

IS (step 810). The base registers are then swapped by 
storing temporary base register value TCSO as base 
register value CS1 and temporary base register value 
TCS1 as CSO (step 812). Once the base register values 
are swapped, processing continues at the next address 

20 in the second bank in flash memory 31 1 . 

[0050] While specific embodiments have been de- 
scribed herein for purposes of illustration, various mod- 
ifications may be made without departing from the scope 
of the invention. Accordingly, the invention is not limited 

25 to the above described embodiments, but instead is de- 
fined by the appended claims in light of their full scope 
of equivalents. 

30 Claims 

1. A method for updating a software subsystem used 
by a network system while services are being pro- 
vided by the software subsystem, comprising the 
35 steps of: 

processing instructions from a primary software 
subsystem loaded at a first base address asso- 
ciated with a primary storage unit coupled to the 
40 network system; 

downloading a secondary software subsystem 
at a second base address associated with a 
secondary storage unit coupled to the network 
system; and 

45 selectively swapping the first base address as- 

sociated with the primary storage unit with the 
second base address associated with the sec- 
ondary storage unit. 

50 2. The method of claim 1 , which further comprises the 
step of: 

incrementing a version counter associated 
with the secondary storage unit which indicates that 
the secondary storage unit contains an updated 
55 version of the software subsystem. 

3. The method of claim 1 or 2, wherein the secondary 
software subsystem is an updated version of the pri- 
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mary softwar subsystem, 

4. The method ot claim 1 , 2 or 3 herein the swapping 
step furth r comprises the substeps of: 

storing the first base address associated with 
the primary storage unit in a temporary storage 
area; 

associating the second base address with the 
primary storage unit; and 
associating the first base address stored in the 
temporary storage area with the secondary 
storage unit. 

5. The method of any preceding claim, further com- 
prising after the swapping step, the step of process- 
ing instructions from the secondary software sub- 
system loaded at a first base address associated 
with the secondary storage unit. 

6. A method for loading a software subsystem on a 
network system which loads instructions from a first 
base address in a storage unit, comprising the steps 
of: 

providing a primary software subsystem loaded 
at the first base address associated with a pri- 
mary storage unit coupled to the network sys- 
tem; 

providing a secondary software subsystem 
loaded at a second base address associated 
with a secondary storage unit coupled to the 
network system; 

selecting a software subsystem from the prima- 
ry software subsystem and the secondary soft- 
ware subsystem; and 

swapping the first base address associated 
with the primary storage unit and the second 
base address associated with the secondary 
storage unit if the secondary software subsys- 
tem is selected. 

7. The method of claim 6, wherein the selecting step 
further comprises the substeps of: 

determining whether the primary software sub- 
system and the secondary software subsystem 
have been altered since they, were generated; 
and 

selecting the primary software subsystem if the 
secondary software subsystem is determined 
to have been altered. 

8. The method of claim 7, wherein the selecting step 
further comprises one of the steps of : 

selecting the secondary software subsystem if 
the primary software subsystem is determined 



to have been altered and the secondary soft- 
ware subsystem is determined not to have 
been alter d; 

selecting the s condary software subsystem if 
s the primary software subsystem and the sec- 

ondary software subsystem have not been al- 
tered and the secondary software subsystem is 
a later version of the software subsystem; and 
selecting the primary software subsystem if the 
10 secondary software subsystem and the primary 

software subsystems were both determined to 
have been altered. 

9. The method of claim 6, 7 or 8, further comprising 
15 the step of loading instructions from a storage unit 
associated with the first base address and selected 
from among the primary storage unit and the sec- 
ondary storage unit. 

20 10. Acomputer program product capable of configuring 
a data processor to update a software subsystem 
used by a network system coupled to a server com- 
puter over a network while services are being pro- 
vided by the software subsystem, the computer pro- 
25 gram product comprising program code to cause 
the data processor to perform the steps of any one 
of the methods of claims 1 to 5. 

11. A computer program product capable of configuring 
30 a data processor to load a software subsystem on 
a network system which loads instructions from a 
first base address in a storage unit, comprising the 
steps of any one of the methods of claims 6 to 8. 

35 12. An apparatus designed to update a software sub- 
system used by a network system coupled to a serv- 
er computer over a network while services are being 
provided by the software subsystem comprising: 

40 a processing module configured to process in- 

structions from a primary software subsystem 
loaded at a first base address associated with 
a primary storage unit coupled to the network 
system; 

45 a download module configured to download a 

secondary software subsystem at a second 
base address associated with a secondary 
storage unit coupled to the network system; 
and 

50 a swapping module configured to selectively 

swap the first base address associated with the 
primary storage unit with the second base ad- 
dress associated with the secondary storage 
unit. 

55 

13. The apparatus of claim 20, further comprising: 

a counter module configured to increment a 
version counter associated with the secondary stor- 
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age unit which indicates that the secondary storage 
unit contains an updated version of the software 
subsyst m. 

14. An apparatus configured to load a software subsys- s 
tern on a networl< system which loads instructions 
from a first base address in a storage unit, compris- 
ing: 

a primary software subsystem loaded at the io 
first base address associated with a primary 
storage unit coupled to the network system; 
a secondary software subsystem loaded at a 
second base address associated with a sec- 
ondary storage unit coupled to the network sys- ^5 
tem; 

a selection module for selecting a software sub- 
system from the primary software subsystem 
and the secondary software subsystem; and 
a swap module for swapping the first base ad- 20 
dress associated with the primary storage unit 
and the second base address associated with 
the secondary storage unit if the secondary 
software subsystem is selected. 

15. The apparatus in claim 14, wherein the selection 
module step further comprises: 

a determination module capable of detecting 
whether the primary software subsystem and 30 
the secondary software subsystem have been 
altered since they were generated; and 
a selection module configured to select the pri- 
mary software subsystem if the secondary soft- 
ware subsystem is determined to have been a I- 35 
tered. 
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